stable-harness 0.0.87 → 0.0.88

package/README.md

@@ -219,9 +219,9 @@ This is constrained repair, not silent magic:
 
 ## Protocols
 
+- Stable Runtime HTTP + SSE: [docs/protocols/http-runtime.md](docs/protocols/http-runtime.md)
 - OpenAI-compatible facade: [docs/protocols/openai-compatible.md](docs/protocols/openai-compatible.md)
 - LangGraph-compatible facade: [docs/protocols/langgraph-compatible.md](docs/protocols/langgraph-compatible.md)
-- HTTP runtime protocol: [docs/protocols/http-runtime.md](docs/protocols/http-runtime.md)
 
 ## Documentation
 

package/docs/guides/integration-guide.md

@@ -88,13 +88,19 @@ Use this path when an existing product or evaluation harness already speaks
 OpenAI-compatible chat completions. Stable Harness still owns workspace loading,
 runtime events, tool-gateway policy, memory lifecycle, and adapter selection.
 
-## HTTP Runtime Protocol
+## Stable Runtime HTTP + SSE
 
-Use the HTTP runtime protocol when the caller needs Stable Harness concepts
-directly: request IDs, sessions, traces, approvals, cancellation, and runtime
-inspection.
+Use Stable Runtime HTTP + SSE when the caller needs Stable Harness concepts
+directly: request IDs, sessions, traces, spans, approvals, cancellation,
+artifacts, memory lifecycle, runtime inspection, and real-time control-plane
+updates.
 
-See [HTTP runtime protocol](protocols/http-runtime.md).
+This is the first-party protocol for Studio and product shells. OpenAI
+compatible `/v1` and LangGraph-compatible servers are ecosystem facades; future
+ACP, A2A, and AG-UI support should map to this protocol instead of adding new
+runtime semantics.
+
+See [Stable Runtime HTTP + SSE](../protocols/http-runtime.md).
 
 ## Backend Adapters
 

package/docs/protocols/http-runtime.md

@@ -1,6 +1,14 @@
-# HTTP Runtime Protocol
+# Stable Runtime HTTP + SSE Protocol
 
-The native HTTP server exposes stable runtime state and request submission.
+The native Stable Runtime protocol is the product control-plane contract. It is
+the source of truth for first-party clients such as Studio, operator dashboards,
+and embedded product shells.
+
+OpenAI-compatible `/v1` and LangGraph-compatible servers are ecosystem
+facades. ACP, A2A, and AG-UI should be added later as adapters over this
+contract, not as new runtime semantics.
+
+## HTTP Commands And Queries
 
 `POST /requests` is a protocol adapter over `RuntimeRequest`. It may pass these
 stable fields through to the runtime:
@@ -22,8 +30,9 @@ runtime requests.
 Inspection endpoints expose normalized runtime state:
 
 - `GET /inspect`
-- `GET /requests`
+- `GET /requests?sessionId=...&agentId=...&state=...`
 - `GET /requests/:id`
+- `POST /requests/:id/cancel`
 - `DELETE /requests/:id`
 - `GET /runs/:id/trace`
 - `GET /runs/:id/spans`
@@ -33,6 +42,12 @@ Inspection endpoints expose normalized runtime state:
 - `GET /workflows/:id/mermaid`
 - `GET /workflows/:id/plan`
 
+Approval endpoints expose operator decisions:
+
+- `GET /approvals?status=pending`
+- `POST /approvals/:id/approve`
+- `POST /approvals/:id/reject`
+
 Memory endpoints expose the native runtime memory store when one is configured:
 
 - `POST /memories`
@@ -53,3 +68,36 @@ Each span includes `spanId`, optional `parentSpanId`, `kind`, `name`, `status`,
 event references, and timing when the stored events include `emittedAt`.
 Clients should render hierarchy from `parentSpanId` instead of inferring it from
 display labels.
+
+## SSE Runtime Events
+
+`GET /events` streams normalized `RuntimeEvent` records as Server-Sent Events.
+It replays matching stored events first, then streams new events from
+`runtime.subscribe`.
+
+Supported filters:
+
+- `requestId`
+- `sessionId`
+- `agentId`
+- `types`, as comma-separated event names or prefix globs such as
+  `runtime.request.*,runtime.approval.*`
+- `since`, as an emitted-at timestamp cursor
+
+Example:
+
+```text
+GET /events?sessionId=customer-123&types=runtime.request.*,runtime.approval.*
+```
+
+Event format:
+
+```text
+event: runtime.request.started
+id: <eventId>
+data: {"type":"runtime.request.started","eventId":"...","requestId":"...","sessionId":"...","agentId":"...","emittedAt":"..."}
+```
+
+This stream is for runtime/control-plane updates. OpenAI chat streaming remains
+scoped to a single `/v1/chat/completions` response and must not become the
+first-party control-plane event source.

package/node_modules/@stable-harness/adapter-deepagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/adapter-deepagents",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -15,7 +15,7 @@
     "@langchain/node-vfs": "^0.1.4",
     "@langchain/ollama": "^1.2.7",
     "@langchain/openai": "^1.4.5",
-    "@stable-harness/core": "0.0.87",
+    "@stable-harness/core": "0.0.88",
     "deepagents": "^1.10.1",
     "langchain": "^1.4.0"
   },

package/node_modules/@stable-harness/adapter-langgraph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/adapter-langgraph",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -11,6 +11,6 @@
   "types": "dist/src/index.d.ts",
   "peerDependencies": {
     "@langchain/langgraph": "^1.3.0",
-    "@stable-harness/core": "0.0.87"
+    "@stable-harness/core": "0.0.88"
   }
 }

package/node_modules/@stable-harness/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/core",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -11,7 +11,7 @@
     ".": "./dist/index.js"
   },
   "peerDependencies": {
-    "@stable-harness/governance": "0.0.87",
-    "@stable-harness/memory": "0.0.87"
+    "@stable-harness/governance": "0.0.88",
+    "@stable-harness/memory": "0.0.88"
   }
 }

package/node_modules/@stable-harness/governance/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/governance",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",

package/node_modules/@stable-harness/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/memory",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",

package/node_modules/@stable-harness/protocols/dist/src/http-events.d.ts

@@ -0,0 +1,16 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { StableHarnessRuntime } from "@stable-harness/core";
+export type RuntimeEventFilter = {
+    requestId?: string;
+    sessionId?: string;
+    agentId?: string;
+    types?: string[];
+    since?: string;
+};
+export declare function readRuntimeEventFilter(url: string | undefined): RuntimeEventFilter | undefined;
+export declare function streamRuntimeEvents(input: {
+    runtime: StableHarnessRuntime;
+    request: IncomingMessage;
+    response: ServerResponse;
+    filter: RuntimeEventFilter;
+}): void;

package/node_modules/@stable-harness/protocols/dist/src/http-events.js

@@ -0,0 +1 @@
+export function readRuntimeEventFilter(e){if(!e?.startsWith("/events"))return;const t=new URL(e,"http://stable-harness.local");if("/events"!==t.pathname)return;const n=t.searchParams.get("types")?.split(",").map(e=>e.trim()).filter(Boolean);return{...readParam(t,"requestId")?{requestId:readParam(t,"requestId")}:{},...readParam(t,"sessionId")?{sessionId:readParam(t,"sessionId")}:{},...readParam(t,"agentId")?{agentId:readParam(t,"agentId")}:{},...n&&n.length>0?{types:n}:{},...readParam(t,"since")?{since:readParam(t,"since")}:{}}}export function streamRuntimeEvents(e){e.response.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive"}),e.response.write(": stable-harness runtime event stream\n\n"),e.response.flushHeaders();for(const t of function replayEvents(e,t){return e.inspect().runs.flatMap(e=>e.events).filter(e=>matchesEventFilter(e,t))}(e.runtime,e.filter))writeRuntimeEvent(e.response,t);const t=e.runtime.subscribe(t=>{matchesEventFilter(t,e.filter)&&writeRuntimeEvent(e.response,t)});e.request.on("close",()=>{t(),e.response.end()})}function matchesEventFilter(e,t){return matchesValue(t.requestId,e.requestId)&&matchesValue(t.sessionId,e.sessionId)&&matchesValue(t.agentId,e.agentId)&&function matchesTypeFilter(e,t){return!t||0===t.length||t.some(t=>t.endsWith("*")?e.startsWith(t.slice(0,-1)):e===t)}(e.type,t.types)&&function matchesSince(e,t){return!t||e.eventId!==t&&Boolean(e.emittedAt&&e.emittedAt>t)}(e,t.since)}function matchesValue(e,t){return!e||e===t}function writeRuntimeEvent(e,t){e.write(`event: ${t.type}\n`),t.eventId&&e.write(`id: ${t.eventId}\n`),e.write(`data: ${JSON.stringify(t)}\n\n`)}function readParam(e,t){const n=e.searchParams.get(t);return n&&n.trim()?n:void 0}

package/node_modules/@stable-harness/protocols/dist/src/http-server.js

@@ -1 +1 @@
-import{createServer as e}from"node:http";import{compileWorkflowPlan as t,projectRuntimeTrace as r,projectRuntimeTraceSpans as n,renderStableHarnessPrometheusMetrics as o,renderWorkflowMermaid as s}from"@stable-harness/core";export function createHttpServer(a){return e((e,d)=>{!async function handleHttpRequest(e,a,d){try{await async function routeHttpRequest(e,a,d){if("GET"===a.method&&"/health"===a.url)return void sendJson(d,200,{ok:!0});if("GET"===a.method&&"/metrics"===a.url)return void function sendText(e,t,r,n="text/plain; charset=utf-8"){e.writeHead(t,{"content-type":n}),e.end(r)}(d,200,o({runtime:e}),"text/plain; version=0.0.4; charset=utf-8");if("GET"===a.method&&"/inspect"===a.url)return void sendJson(d,200,e.inspect());if("GET"===a.method&&"/requests"===a.url)return void sendJson(d,200,e.listRequests());if(await async function handleAdministrationRoutes(e){const{runtime:t,request:r,response:n}=e;if("GET"===r.method&&"/sessions"===r.url)return sendJson(n,200,t.listSessions()),!0;const o=function readSessionDeleteId(e){const t=(e??"").match(/^\/sessions\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);if("DELETE"===r.method&&o)return sendJson(n,200,t.deleteSession(o)),!0;const s=function readRequestDeleteId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);if("DELETE"===r.method&&s)return sendJson(n,200,t.deleteRequest(s)),!0;if("GET"===r.method&&r.url?.startsWith("/memories"))return sendJson(n,200,await t.listMemories(function readMemoryList(e){const t=new URL(e??"/memories","http://stable-harness.local"),r=t.searchParams.getAll("status").filter(e=>"active"===e||"stale"===e||"conflicted"===e||"archived"===e||"pending_review"===e);return{...t.searchParams.get("namespace")?{namespace:t.searchParams.get("namespace")}:{},...r.length>0?{statuses:r}:{}}}(r.url))),!0;if("POST"===r.method&&"/memories"===r.url){const e=await readJson(r);return sendJson(n,200,await t.memorize(e)),!0}if("POST"===r.method&&"/memories/recall"===r.url){const e=await readJson(r);return sendJson(n,200,await t.recallMemories(e)),!0}const a=function readMemoryArchiveId(e){const t=(e??"").match(/^\/memories\/([^/]+)\/archive$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);if("POST"===r.method&&a){const e=await readJson(r);return sendJson(n,200,await t.archiveMemory(a,"string"==typeof e.reason?e.reason:void 0)),!0}const d=function readMemoryUpdateId(e){const t=(e??"").match(/^\/memories\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);return!("PATCH"!==r.method||!d||(sendJson(n,200,await t.updateMemory({id:d,...await readJson(r)})),0))}({runtime:e,request:a,response:d}))return;const i=function readArtifactList(e){if(!e?.startsWith("/artifacts"))return;const t=new URL(e,"http://stable-harness.local");return"/artifacts"===t.pathname?{...t.searchParams.get("requestId")?{requestId:t.searchParams.get("requestId")}:{},...t.searchParams.get("sessionId")?{sessionId:t.searchParams.get("sessionId")}:{},...t.searchParams.get("agentId")?{agentId:t.searchParams.get("agentId")}:{}}:void 0}(a.url);if("GET"===a.method&&i)return void sendJson(d,200,e.listArtifacts(i));const u=function readArtifactContentId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)\/content$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&u){const t=e.getArtifact(u),r=e.readArtifact(u);return void sendJson(d,t&&void 0!==r?200:404,t&&void 0!==r?{artifact:t,content:r}:{error:"artifact_content_not_found"})}const c=function readArtifactId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&c){const t=e.getArtifact(c);return void sendJson(d,t?200:404,t??{error:"artifact_not_found"})}const f=function readApprovalList(e){if(!e?.startsWith("/approvals"))return;const t=new URL(e,"http://stable-harness.local");if("/approvals"!==t.pathname)return;const r=t.searchParams.get("status");return{status:"pending"===r||"approved"===r||"rejected"===r?r:void 0}}(a.url);if("GET"===a.method&&f)return void sendJson(d,200,await e.listApprovals(f.status));const m=function readApprovalDecision(e){const t=(e??"").match(/^\/approvals\/([^/]+)\/(approve|reject)$/u);if(t?.[1]&&t[2])return{id:decodeURIComponent(t[1]),status:"approve"===t[2]?"approved":"rejected"}}(a.url);if("POST"===a.method&&m){const t=await e.resolveApproval(m.id,m.status);return void sendJson(d,t?200:404,t??{error:"approval_not_found"})}if("GET"===a.method&&"/workflows"===a.url)return void sendJson(d,200,e.inspect().workflows);const l=function readWorkflowMermaidId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/mermaid$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&l){const t=e.getWorkflow(l);return void sendJson(d,t?200:404,t?{mermaid:s(t)}:{error:"workflow_not_found"})}const p=function readWorkflowPlanId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/plan$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&p){const r=e.getWorkflow(p);return void sendJson(d,r?200:404,r?t(r):{error:"workflow_not_found"})}const h=function readRequestInspectionId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&h){const t=e.inspectRequest(h);return void sendJson(d,t?200:404,t??{error:"request_not_found"})}const v=function readTraceRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/trace$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&v){const t=e.getRun(v);return void sendJson(d,t?200:404,t?r(t):{error:"run_not_found"})}const I=function readSpanRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/spans$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&I){const t=e.getRun(I);return void sendJson(d,t?200:404,t?n(t):{error:"run_not_found"})}const w=function readReplayRequestId(e){const t=(e??"").match(/^\/requests\/([^/]+)\/replay$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&w){const t=e.exportReplayBundle(w);return void sendJson(d,t?200:404,t??{error:"run_not_found"})}if("POST"===a.method&&"/requests"===a.url){const t=await readJson(a);return void sendJson(d,200,await e.request(function readRuntimeRequest(e){const t=function readToolCall(e){if("object"!=typeof e||null===e)return;const t=e;return"string"==typeof t.toolId?{toolId:t.toolId,args:t.args}:void 0}(e.toolCall),r=function readWorkflow(e){const t=readRecord(e);if(t)return{..."string"==typeof t.workflowId?{workflowId:t.workflowId}:{},..."string"==typeof t.routeId?{routeId:t.routeId}:{},...void 0!==t.input?{input:t.input}:{},..."object"==typeof t.metadata&&t.metadata?{metadata:t.metadata}:{}}}(e.workflow),n=function readMemory(e){const t=readRecord(e);if(t)return{..."string"==typeof t.namespace?{namespace:t.namespace}:{},...!1===t.recall||readRecord(t.recall)?{recall:t.recall}:{},...Array.isArray(t.candidates)?{candidates:t.candidates}:{}}}(e.memory),o=readRecord(e.metadata);return{input:"string"==typeof e.input?e.input:"",..."string"==typeof e.agentId?{agentId:e.agentId}:{},..."string"==typeof e.sessionId?{sessionId:e.sessionId}:{},..."string"==typeof e.requestId?{requestId:e.requestId}:{},..."string"==typeof e.parentRunId?{parentRunId:e.parentRunId}:{},...t?{toolCall:t}:{},...r?{workflow:r}:{},...n?{memory:n}:{},...o?{metadata:o}:{}}}(t)))}sendJson(d,404,{error:"not_found"})}(e,a,d)}catch(e){sendJson(d,500,{error:e instanceof Error?e.message:String(e)})}}(a,e,d)})}function readRecord(e){return"object"!=typeof e||null===e||Array.isArray(e)?void 0:e}function sendJson(e,t,r){e.writeHead(t,{"content-type":"application/json"}),e.end(JSON.stringify(r))}async function readJson(e){const t=[];for await(const r of e)t.push(Buffer.isBuffer(r)?r:Buffer.from(r));return 0===t.length?{}:JSON.parse(Buffer.concat(t).toString("utf8"))}
+import{createServer as e}from"node:http";import{compileWorkflowPlan as t,projectRuntimeTrace as n,projectRuntimeTraceSpans as r,renderStableHarnessPrometheusMetrics as o,renderWorkflowMermaid as s}from"@stable-harness/core";import{readRuntimeEventFilter as a,streamRuntimeEvents as d}from"./http-events.js";export function createHttpServer(u){return e((e,i)=>{!async function handleHttpRequest(e,u,i){try{await async function routeHttpRequest(e,u,i){(function handleSystemRoutes(e,t,n){return"GET"===t.method&&"/health"===t.url?(sendJson(n,200,{ok:!0}),!0):"GET"===t.method&&"/metrics"===t.url?(function sendText(e,t,n,r="text/plain; charset=utf-8"){e.writeHead(t,{"content-type":r}),e.end(n)}(n,200,o({runtime:e}),"text/plain; version=0.0.4; charset=utf-8"),!0):"GET"===t.method&&"/inspect"===t.url&&(sendJson(n,200,e.inspect()),!0)})(e,u,i)||function handleEventRoutes(e,t,n){const r=a(t.url);return!("GET"!==t.method||!r||(d({runtime:e,request:t,response:n,filter:r}),0))}(e,u,i)||await async function handleAdministrationRoutes(e){const{runtime:t,request:n,response:r}=e;if("GET"===n.method&&"/sessions"===n.url)return sendJson(r,200,t.listSessions()),!0;const o=function readSessionDeleteId(e){const t=(e??"").match(/^\/sessions\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("DELETE"===n.method&&o)return sendJson(r,200,t.deleteSession(o)),!0;const s=function readRequestDeleteId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("DELETE"===n.method&&s)return sendJson(r,200,t.deleteRequest(s)),!0;if("GET"===n.method&&n.url?.startsWith("/memories"))return sendJson(r,200,await t.listMemories(function readMemoryList(e){const t=new URL(e??"/memories","http://stable-harness.local"),n=t.searchParams.getAll("status").filter(e=>"active"===e||"stale"===e||"conflicted"===e||"archived"===e||"pending_review"===e);return{...t.searchParams.get("namespace")?{namespace:t.searchParams.get("namespace")}:{},...n.length>0?{statuses:n}:{}}}(n.url))),!0;if("POST"===n.method&&"/memories"===n.url){const e=await readJson(n);return sendJson(r,200,await t.memorize(e)),!0}if("POST"===n.method&&"/memories/recall"===n.url){const e=await readJson(n);return sendJson(r,200,await t.recallMemories(e)),!0}const a=function readMemoryArchiveId(e){const t=(e??"").match(/^\/memories\/([^/]+)\/archive$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("POST"===n.method&&a){const e=await readJson(n);return sendJson(r,200,await t.archiveMemory(a,"string"==typeof e.reason?e.reason:void 0)),!0}const d=function readMemoryUpdateId(e){const t=(e??"").match(/^\/memories\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);return!("PATCH"!==n.method||!d||(sendJson(r,200,await t.updateMemory({id:d,...await readJson(n)})),0))}({runtime:e,request:u,response:i})||function handleArtifactRoutes(e,t,n){const r=function readArtifactList(e){if(!e?.startsWith("/artifacts"))return;const t=new URL(e,"http://stable-harness.local");return"/artifacts"===t.pathname?{...t.searchParams.get("requestId")?{requestId:t.searchParams.get("requestId")}:{},...t.searchParams.get("sessionId")?{sessionId:t.searchParams.get("sessionId")}:{},...t.searchParams.get("agentId")?{agentId:t.searchParams.get("agentId")}:{}}:void 0}(t.url);if("GET"===t.method&&r)return sendJson(n,200,e.listArtifacts(r)),!0;const o=function readArtifactContentId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)\/content$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&o){const t=e.getArtifact(o),r=e.readArtifact(o);return sendJson(n,t&&void 0!==r?200:404,t&&void 0!==r?{artifact:t,content:r}:{error:"artifact_content_not_found"}),!0}const s=function readArtifactId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&s){const t=e.getArtifact(s);return sendJson(n,t?200:404,t??{error:"artifact_not_found"}),!0}return!1}(e,u,i)||await async function handleApprovalRoutes(e,t,n){const r=function readApprovalList(e){if(!e?.startsWith("/approvals"))return;const t=new URL(e,"http://stable-harness.local");if("/approvals"!==t.pathname)return;const n=t.searchParams.get("status");return{status:"pending"===n||"approved"===n||"rejected"===n?n:void 0}}(t.url);if("GET"===t.method&&r)return sendJson(n,200,await e.listApprovals(r.status)),!0;const o=function readApprovalDecision(e){const t=(e??"").match(/^\/approvals\/([^/]+)\/(approve|reject)$/u);if(t?.[1]&&t[2])return{id:decodeURIComponent(t[1]),status:"approve"===t[2]?"approved":"rejected"}}(t.url);if("POST"===t.method&&o){const t=await e.resolveApproval(o.id,o.status);return sendJson(n,t?200:404,t??{error:"approval_not_found"}),!0}return!1}(e,u,i)||await async function handleRequestRoutes(e,t,n){if("GET"===t.method&&"/requests"===t.url)return sendJson(n,200,e.listRequests()),!0;const r=function readRequestList(e){if(!e?.startsWith("/requests"))return;const t=new URL(e,"http://stable-harness.local");return"/requests"===t.pathname?{...t.searchParams.get("agentId")?{agentId:t.searchParams.get("agentId")}:{},...t.searchParams.get("sessionId")?{sessionId:t.searchParams.get("sessionId")}:{},...readRunState(t.searchParams.get("state"))?{state:readRunState(t.searchParams.get("state"))}:{}}:void 0}(t.url);if("GET"===t.method&&r)return sendJson(n,200,e.listRequests(r)),!0;const o=function readRequestCancelId(e){const t=(e??"").match(/^\/requests\/([^/]+)\/cancel$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("POST"===t.method&&o){const r=await readJson(t);return e.cancel(o,"string"==typeof r.reason?r.reason:void 0),sendJson(n,200,e.inspectRequest(o)??{error:"request_not_found"}),!0}if("POST"===t.method&&"/requests"===t.url){const r=await readJson(t);return sendJson(n,200,await e.request(function readRuntimeRequest(e){const t=function readToolCall(e){if("object"!=typeof e||null===e)return;const t=e;return"string"==typeof t.toolId?{toolId:t.toolId,args:t.args}:void 0}(e.toolCall),n=function readWorkflow(e){const t=readRecord(e);if(t)return{..."string"==typeof t.workflowId?{workflowId:t.workflowId}:{},..."string"==typeof t.routeId?{routeId:t.routeId}:{},...void 0!==t.input?{input:t.input}:{},..."object"==typeof t.metadata&&t.metadata?{metadata:t.metadata}:{}}}(e.workflow),r=function readMemory(e){const t=readRecord(e);if(t)return{..."string"==typeof t.namespace?{namespace:t.namespace}:{},...!1===t.recall||readRecord(t.recall)?{recall:t.recall}:{},...Array.isArray(t.candidates)?{candidates:t.candidates}:{}}}(e.memory),o=readRecord(e.metadata);return{input:"string"==typeof e.input?e.input:"",..."string"==typeof e.agentId?{agentId:e.agentId}:{},..."string"==typeof e.sessionId?{sessionId:e.sessionId}:{},..."string"==typeof e.requestId?{requestId:e.requestId}:{},..."string"==typeof e.parentRunId?{parentRunId:e.parentRunId}:{},...t?{toolCall:t}:{},...n?{workflow:n}:{},...r?{memory:r}:{},...o?{metadata:o}:{}}}(r))),!0}return!1}(e,u,i)||function handleWorkflowRoutes(e,n,r){if("GET"===n.method&&"/workflows"===n.url)return sendJson(r,200,e.inspect().workflows),!0;const o=function readWorkflowMermaidId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/mermaid$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("GET"===n.method&&o){const t=e.getWorkflow(o);return sendJson(r,t?200:404,t?{mermaid:s(t)}:{error:"workflow_not_found"}),!0}const a=function readWorkflowPlanId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/plan$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("GET"===n.method&&a){const n=e.getWorkflow(a);return sendJson(r,n?200:404,n?t(n):{error:"workflow_not_found"}),!0}return!1}(e,u,i)||function handleRunInspectionRoutes(e,t,o){const s=function readRequestInspectionId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&s){const t=e.inspectRequest(s);return sendJson(o,t?200:404,t??{error:"request_not_found"}),!0}const a=function readTraceRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/trace$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&a){const t=e.getRun(a);return sendJson(o,t?200:404,t?n(t):{error:"run_not_found"}),!0}const d=function readSpanRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/spans$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&d){const t=e.getRun(d);return sendJson(o,t?200:404,t?r(t):{error:"run_not_found"}),!0}const u=function readReplayRequestId(e){const t=(e??"").match(/^\/requests\/([^/]+)\/replay$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&u){const t=e.exportReplayBundle(u);return sendJson(o,t?200:404,t??{error:"run_not_found"}),!0}return!1}(e,u,i)||sendJson(i,404,{error:"not_found"})}(e,u,i)}catch(e){sendJson(i,500,{error:e instanceof Error?e.message:String(e)})}}(u,e,i)})}function readRunState(e){return"queued"===e||"running"===e||"completed"===e||"failed"===e||"cancelled"===e?e:void 0}function readRecord(e){return"object"!=typeof e||null===e||Array.isArray(e)?void 0:e}function sendJson(e,t,n){e.writeHead(t,{"content-type":"application/json"}),e.end(JSON.stringify(n))}async function readJson(e){const t=[];for await(const n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return 0===t.length?{}:JSON.parse(Buffer.concat(t).toString("utf8"))}

package/node_modules/@stable-harness/protocols/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/protocols",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -10,6 +10,6 @@
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
   "peerDependencies": {
-    "@stable-harness/core": "0.0.87"
+    "@stable-harness/core": "0.0.88"
   }
 }

package/node_modules/@stable-harness/tool-gateway/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/tool-gateway",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",

package/node_modules/@stable-harness/workspace-yaml/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/workspace-yaml",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -11,6 +11,6 @@
     ".": "./dist/index.js"
   },
   "peerDependencies": {
-    "@stable-harness/core": "0.0.87"
+    "@stable-harness/core": "0.0.88"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stable-harness",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "description": "Stable application runtime and operator control plane for agent workspaces.",
   "license": "Apache-2.0",
@@ -75,21 +75,21 @@
     "packages/*"
   ],
   "dependencies": {
-    "@easynet/better-call": "^0.1.69",
+    "@easynet/better-call": "^0.1.70",
     "@langchain/core": "^1.1.46",
     "@langchain/langgraph": "^1.3.0",
     "@langchain/langgraph-api": "^1.2.1",
     "@langchain/node-vfs": "^0.1.4",
     "@langchain/ollama": "^1.2.7",
     "@langchain/openai": "^1.4.5",
-    "@stable-harness/adapter-deepagents": "0.0.87",
-    "@stable-harness/adapter-langgraph": "0.0.87",
-    "@stable-harness/core": "0.0.87",
-    "@stable-harness/governance": "0.0.87",
-    "@stable-harness/memory": "0.0.87",
-    "@stable-harness/protocols": "0.0.87",
-    "@stable-harness/tool-gateway": "0.0.87",
-    "@stable-harness/workspace-yaml": "0.0.87",
+    "@stable-harness/adapter-deepagents": "0.0.88",
+    "@stable-harness/adapter-langgraph": "0.0.88",
+    "@stable-harness/core": "0.0.88",
+    "@stable-harness/governance": "0.0.88",
+    "@stable-harness/memory": "0.0.88",
+    "@stable-harness/protocols": "0.0.88",
+    "@stable-harness/tool-gateway": "0.0.88",
+    "@stable-harness/workspace-yaml": "0.0.88",
     "deepagents": "^1.10.1",
     "langchain": "^1.4.0",
     "yaml": "^2.8.2",

package/packages/adapter-deepagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/adapter-deepagents",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -15,7 +15,7 @@
     "@langchain/node-vfs": "^0.1.4",
     "@langchain/ollama": "^1.2.7",
     "@langchain/openai": "^1.4.5",
-    "@stable-harness/core": "0.0.87",
+    "@stable-harness/core": "0.0.88",
     "deepagents": "^1.10.1",
     "langchain": "^1.4.0"
   },

package/packages/adapter-langgraph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/adapter-langgraph",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -11,6 +11,6 @@
   "types": "dist/src/index.d.ts",
   "peerDependencies": {
     "@langchain/langgraph": "^1.3.0",
-    "@stable-harness/core": "0.0.87"
+    "@stable-harness/core": "0.0.88"
   }
 }

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/cli",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -14,12 +14,12 @@
   "types": "dist/src/index.d.ts",
   "peerDependencies": {
     "@langchain/langgraph-api": "^1.2.1",
-    "@stable-harness/adapter-deepagents": "0.0.87",
-    "@stable-harness/adapter-langgraph": "0.0.87",
-    "@stable-harness/core": "0.0.87",
-    "@stable-harness/memory": "0.0.87",
-    "@stable-harness/protocols": "0.0.87",
-    "@stable-harness/tool-gateway": "0.0.87",
-    "@stable-harness/workspace-yaml": "0.0.87"
+    "@stable-harness/adapter-deepagents": "0.0.88",
+    "@stable-harness/adapter-langgraph": "0.0.88",
+    "@stable-harness/core": "0.0.88",
+    "@stable-harness/memory": "0.0.88",
+    "@stable-harness/protocols": "0.0.88",
+    "@stable-harness/tool-gateway": "0.0.88",
+    "@stable-harness/workspace-yaml": "0.0.88"
   }
 }

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/core",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -11,7 +11,7 @@
     ".": "./dist/index.js"
   },
   "peerDependencies": {
-    "@stable-harness/governance": "0.0.87",
-    "@stable-harness/memory": "0.0.87"
+    "@stable-harness/governance": "0.0.88",
+    "@stable-harness/memory": "0.0.88"
   }
 }

package/packages/evaluation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/evaluation",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -10,6 +10,6 @@
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
   "peerDependencies": {
-    "@stable-harness/core": "0.0.87"
+    "@stable-harness/core": "0.0.88"
   }
 }

package/packages/governance/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/governance",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",

package/packages/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/memory",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",

package/packages/protocols/dist/src/http-events.d.ts

@@ -0,0 +1,16 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { StableHarnessRuntime } from "@stable-harness/core";
+export type RuntimeEventFilter = {
+    requestId?: string;
+    sessionId?: string;
+    agentId?: string;
+    types?: string[];
+    since?: string;
+};
+export declare function readRuntimeEventFilter(url: string | undefined): RuntimeEventFilter | undefined;
+export declare function streamRuntimeEvents(input: {
+    runtime: StableHarnessRuntime;
+    request: IncomingMessage;
+    response: ServerResponse;
+    filter: RuntimeEventFilter;
+}): void;

package/packages/protocols/dist/src/http-events.js

@@ -0,0 +1 @@
+export function readRuntimeEventFilter(e){if(!e?.startsWith("/events"))return;const t=new URL(e,"http://stable-harness.local");if("/events"!==t.pathname)return;const n=t.searchParams.get("types")?.split(",").map(e=>e.trim()).filter(Boolean);return{...readParam(t,"requestId")?{requestId:readParam(t,"requestId")}:{},...readParam(t,"sessionId")?{sessionId:readParam(t,"sessionId")}:{},...readParam(t,"agentId")?{agentId:readParam(t,"agentId")}:{},...n&&n.length>0?{types:n}:{},...readParam(t,"since")?{since:readParam(t,"since")}:{}}}export function streamRuntimeEvents(e){e.response.writeHead(200,{"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive"}),e.response.write(": stable-harness runtime event stream\n\n"),e.response.flushHeaders();for(const t of function replayEvents(e,t){return e.inspect().runs.flatMap(e=>e.events).filter(e=>matchesEventFilter(e,t))}(e.runtime,e.filter))writeRuntimeEvent(e.response,t);const t=e.runtime.subscribe(t=>{matchesEventFilter(t,e.filter)&&writeRuntimeEvent(e.response,t)});e.request.on("close",()=>{t(),e.response.end()})}function matchesEventFilter(e,t){return matchesValue(t.requestId,e.requestId)&&matchesValue(t.sessionId,e.sessionId)&&matchesValue(t.agentId,e.agentId)&&function matchesTypeFilter(e,t){return!t||0===t.length||t.some(t=>t.endsWith("*")?e.startsWith(t.slice(0,-1)):e===t)}(e.type,t.types)&&function matchesSince(e,t){return!t||e.eventId!==t&&Boolean(e.emittedAt&&e.emittedAt>t)}(e,t.since)}function matchesValue(e,t){return!e||e===t}function writeRuntimeEvent(e,t){e.write(`event: ${t.type}\n`),t.eventId&&e.write(`id: ${t.eventId}\n`),e.write(`data: ${JSON.stringify(t)}\n\n`)}function readParam(e,t){const n=e.searchParams.get(t);return n&&n.trim()?n:void 0}

package/packages/protocols/dist/src/http-server.js

@@ -1 +1 @@
-import{createServer as e}from"node:http";import{compileWorkflowPlan as t,projectRuntimeTrace as r,projectRuntimeTraceSpans as n,renderStableHarnessPrometheusMetrics as o,renderWorkflowMermaid as s}from"@stable-harness/core";export function createHttpServer(a){return e((e,d)=>{!async function handleHttpRequest(e,a,d){try{await async function routeHttpRequest(e,a,d){if("GET"===a.method&&"/health"===a.url)return void sendJson(d,200,{ok:!0});if("GET"===a.method&&"/metrics"===a.url)return void function sendText(e,t,r,n="text/plain; charset=utf-8"){e.writeHead(t,{"content-type":n}),e.end(r)}(d,200,o({runtime:e}),"text/plain; version=0.0.4; charset=utf-8");if("GET"===a.method&&"/inspect"===a.url)return void sendJson(d,200,e.inspect());if("GET"===a.method&&"/requests"===a.url)return void sendJson(d,200,e.listRequests());if(await async function handleAdministrationRoutes(e){const{runtime:t,request:r,response:n}=e;if("GET"===r.method&&"/sessions"===r.url)return sendJson(n,200,t.listSessions()),!0;const o=function readSessionDeleteId(e){const t=(e??"").match(/^\/sessions\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);if("DELETE"===r.method&&o)return sendJson(n,200,t.deleteSession(o)),!0;const s=function readRequestDeleteId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);if("DELETE"===r.method&&s)return sendJson(n,200,t.deleteRequest(s)),!0;if("GET"===r.method&&r.url?.startsWith("/memories"))return sendJson(n,200,await t.listMemories(function readMemoryList(e){const t=new URL(e??"/memories","http://stable-harness.local"),r=t.searchParams.getAll("status").filter(e=>"active"===e||"stale"===e||"conflicted"===e||"archived"===e||"pending_review"===e);return{...t.searchParams.get("namespace")?{namespace:t.searchParams.get("namespace")}:{},...r.length>0?{statuses:r}:{}}}(r.url))),!0;if("POST"===r.method&&"/memories"===r.url){const e=await readJson(r);return sendJson(n,200,await t.memorize(e)),!0}if("POST"===r.method&&"/memories/recall"===r.url){const e=await readJson(r);return sendJson(n,200,await t.recallMemories(e)),!0}const a=function readMemoryArchiveId(e){const t=(e??"").match(/^\/memories\/([^/]+)\/archive$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);if("POST"===r.method&&a){const e=await readJson(r);return sendJson(n,200,await t.archiveMemory(a,"string"==typeof e.reason?e.reason:void 0)),!0}const d=function readMemoryUpdateId(e){const t=(e??"").match(/^\/memories\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(r.url);return!("PATCH"!==r.method||!d||(sendJson(n,200,await t.updateMemory({id:d,...await readJson(r)})),0))}({runtime:e,request:a,response:d}))return;const i=function readArtifactList(e){if(!e?.startsWith("/artifacts"))return;const t=new URL(e,"http://stable-harness.local");return"/artifacts"===t.pathname?{...t.searchParams.get("requestId")?{requestId:t.searchParams.get("requestId")}:{},...t.searchParams.get("sessionId")?{sessionId:t.searchParams.get("sessionId")}:{},...t.searchParams.get("agentId")?{agentId:t.searchParams.get("agentId")}:{}}:void 0}(a.url);if("GET"===a.method&&i)return void sendJson(d,200,e.listArtifacts(i));const u=function readArtifactContentId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)\/content$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&u){const t=e.getArtifact(u),r=e.readArtifact(u);return void sendJson(d,t&&void 0!==r?200:404,t&&void 0!==r?{artifact:t,content:r}:{error:"artifact_content_not_found"})}const c=function readArtifactId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&c){const t=e.getArtifact(c);return void sendJson(d,t?200:404,t??{error:"artifact_not_found"})}const f=function readApprovalList(e){if(!e?.startsWith("/approvals"))return;const t=new URL(e,"http://stable-harness.local");if("/approvals"!==t.pathname)return;const r=t.searchParams.get("status");return{status:"pending"===r||"approved"===r||"rejected"===r?r:void 0}}(a.url);if("GET"===a.method&&f)return void sendJson(d,200,await e.listApprovals(f.status));const m=function readApprovalDecision(e){const t=(e??"").match(/^\/approvals\/([^/]+)\/(approve|reject)$/u);if(t?.[1]&&t[2])return{id:decodeURIComponent(t[1]),status:"approve"===t[2]?"approved":"rejected"}}(a.url);if("POST"===a.method&&m){const t=await e.resolveApproval(m.id,m.status);return void sendJson(d,t?200:404,t??{error:"approval_not_found"})}if("GET"===a.method&&"/workflows"===a.url)return void sendJson(d,200,e.inspect().workflows);const l=function readWorkflowMermaidId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/mermaid$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&l){const t=e.getWorkflow(l);return void sendJson(d,t?200:404,t?{mermaid:s(t)}:{error:"workflow_not_found"})}const p=function readWorkflowPlanId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/plan$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&p){const r=e.getWorkflow(p);return void sendJson(d,r?200:404,r?t(r):{error:"workflow_not_found"})}const h=function readRequestInspectionId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&h){const t=e.inspectRequest(h);return void sendJson(d,t?200:404,t??{error:"request_not_found"})}const v=function readTraceRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/trace$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&v){const t=e.getRun(v);return void sendJson(d,t?200:404,t?r(t):{error:"run_not_found"})}const I=function readSpanRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/spans$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&I){const t=e.getRun(I);return void sendJson(d,t?200:404,t?n(t):{error:"run_not_found"})}const w=function readReplayRequestId(e){const t=(e??"").match(/^\/requests\/([^/]+)\/replay$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(a.url);if("GET"===a.method&&w){const t=e.exportReplayBundle(w);return void sendJson(d,t?200:404,t??{error:"run_not_found"})}if("POST"===a.method&&"/requests"===a.url){const t=await readJson(a);return void sendJson(d,200,await e.request(function readRuntimeRequest(e){const t=function readToolCall(e){if("object"!=typeof e||null===e)return;const t=e;return"string"==typeof t.toolId?{toolId:t.toolId,args:t.args}:void 0}(e.toolCall),r=function readWorkflow(e){const t=readRecord(e);if(t)return{..."string"==typeof t.workflowId?{workflowId:t.workflowId}:{},..."string"==typeof t.routeId?{routeId:t.routeId}:{},...void 0!==t.input?{input:t.input}:{},..."object"==typeof t.metadata&&t.metadata?{metadata:t.metadata}:{}}}(e.workflow),n=function readMemory(e){const t=readRecord(e);if(t)return{..."string"==typeof t.namespace?{namespace:t.namespace}:{},...!1===t.recall||readRecord(t.recall)?{recall:t.recall}:{},...Array.isArray(t.candidates)?{candidates:t.candidates}:{}}}(e.memory),o=readRecord(e.metadata);return{input:"string"==typeof e.input?e.input:"",..."string"==typeof e.agentId?{agentId:e.agentId}:{},..."string"==typeof e.sessionId?{sessionId:e.sessionId}:{},..."string"==typeof e.requestId?{requestId:e.requestId}:{},..."string"==typeof e.parentRunId?{parentRunId:e.parentRunId}:{},...t?{toolCall:t}:{},...r?{workflow:r}:{},...n?{memory:n}:{},...o?{metadata:o}:{}}}(t)))}sendJson(d,404,{error:"not_found"})}(e,a,d)}catch(e){sendJson(d,500,{error:e instanceof Error?e.message:String(e)})}}(a,e,d)})}function readRecord(e){return"object"!=typeof e||null===e||Array.isArray(e)?void 0:e}function sendJson(e,t,r){e.writeHead(t,{"content-type":"application/json"}),e.end(JSON.stringify(r))}async function readJson(e){const t=[];for await(const r of e)t.push(Buffer.isBuffer(r)?r:Buffer.from(r));return 0===t.length?{}:JSON.parse(Buffer.concat(t).toString("utf8"))}
+import{createServer as e}from"node:http";import{compileWorkflowPlan as t,projectRuntimeTrace as n,projectRuntimeTraceSpans as r,renderStableHarnessPrometheusMetrics as o,renderWorkflowMermaid as s}from"@stable-harness/core";import{readRuntimeEventFilter as a,streamRuntimeEvents as d}from"./http-events.js";export function createHttpServer(u){return e((e,i)=>{!async function handleHttpRequest(e,u,i){try{await async function routeHttpRequest(e,u,i){(function handleSystemRoutes(e,t,n){return"GET"===t.method&&"/health"===t.url?(sendJson(n,200,{ok:!0}),!0):"GET"===t.method&&"/metrics"===t.url?(function sendText(e,t,n,r="text/plain; charset=utf-8"){e.writeHead(t,{"content-type":r}),e.end(n)}(n,200,o({runtime:e}),"text/plain; version=0.0.4; charset=utf-8"),!0):"GET"===t.method&&"/inspect"===t.url&&(sendJson(n,200,e.inspect()),!0)})(e,u,i)||function handleEventRoutes(e,t,n){const r=a(t.url);return!("GET"!==t.method||!r||(d({runtime:e,request:t,response:n,filter:r}),0))}(e,u,i)||await async function handleAdministrationRoutes(e){const{runtime:t,request:n,response:r}=e;if("GET"===n.method&&"/sessions"===n.url)return sendJson(r,200,t.listSessions()),!0;const o=function readSessionDeleteId(e){const t=(e??"").match(/^\/sessions\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("DELETE"===n.method&&o)return sendJson(r,200,t.deleteSession(o)),!0;const s=function readRequestDeleteId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("DELETE"===n.method&&s)return sendJson(r,200,t.deleteRequest(s)),!0;if("GET"===n.method&&n.url?.startsWith("/memories"))return sendJson(r,200,await t.listMemories(function readMemoryList(e){const t=new URL(e??"/memories","http://stable-harness.local"),n=t.searchParams.getAll("status").filter(e=>"active"===e||"stale"===e||"conflicted"===e||"archived"===e||"pending_review"===e);return{...t.searchParams.get("namespace")?{namespace:t.searchParams.get("namespace")}:{},...n.length>0?{statuses:n}:{}}}(n.url))),!0;if("POST"===n.method&&"/memories"===n.url){const e=await readJson(n);return sendJson(r,200,await t.memorize(e)),!0}if("POST"===n.method&&"/memories/recall"===n.url){const e=await readJson(n);return sendJson(r,200,await t.recallMemories(e)),!0}const a=function readMemoryArchiveId(e){const t=(e??"").match(/^\/memories\/([^/]+)\/archive$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("POST"===n.method&&a){const e=await readJson(n);return sendJson(r,200,await t.archiveMemory(a,"string"==typeof e.reason?e.reason:void 0)),!0}const d=function readMemoryUpdateId(e){const t=(e??"").match(/^\/memories\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);return!("PATCH"!==n.method||!d||(sendJson(r,200,await t.updateMemory({id:d,...await readJson(n)})),0))}({runtime:e,request:u,response:i})||function handleArtifactRoutes(e,t,n){const r=function readArtifactList(e){if(!e?.startsWith("/artifacts"))return;const t=new URL(e,"http://stable-harness.local");return"/artifacts"===t.pathname?{...t.searchParams.get("requestId")?{requestId:t.searchParams.get("requestId")}:{},...t.searchParams.get("sessionId")?{sessionId:t.searchParams.get("sessionId")}:{},...t.searchParams.get("agentId")?{agentId:t.searchParams.get("agentId")}:{}}:void 0}(t.url);if("GET"===t.method&&r)return sendJson(n,200,e.listArtifacts(r)),!0;const o=function readArtifactContentId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)\/content$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&o){const t=e.getArtifact(o),r=e.readArtifact(o);return sendJson(n,t&&void 0!==r?200:404,t&&void 0!==r?{artifact:t,content:r}:{error:"artifact_content_not_found"}),!0}const s=function readArtifactId(e){const t=(e??"").match(/^\/artifacts\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&s){const t=e.getArtifact(s);return sendJson(n,t?200:404,t??{error:"artifact_not_found"}),!0}return!1}(e,u,i)||await async function handleApprovalRoutes(e,t,n){const r=function readApprovalList(e){if(!e?.startsWith("/approvals"))return;const t=new URL(e,"http://stable-harness.local");if("/approvals"!==t.pathname)return;const n=t.searchParams.get("status");return{status:"pending"===n||"approved"===n||"rejected"===n?n:void 0}}(t.url);if("GET"===t.method&&r)return sendJson(n,200,await e.listApprovals(r.status)),!0;const o=function readApprovalDecision(e){const t=(e??"").match(/^\/approvals\/([^/]+)\/(approve|reject)$/u);if(t?.[1]&&t[2])return{id:decodeURIComponent(t[1]),status:"approve"===t[2]?"approved":"rejected"}}(t.url);if("POST"===t.method&&o){const t=await e.resolveApproval(o.id,o.status);return sendJson(n,t?200:404,t??{error:"approval_not_found"}),!0}return!1}(e,u,i)||await async function handleRequestRoutes(e,t,n){if("GET"===t.method&&"/requests"===t.url)return sendJson(n,200,e.listRequests()),!0;const r=function readRequestList(e){if(!e?.startsWith("/requests"))return;const t=new URL(e,"http://stable-harness.local");return"/requests"===t.pathname?{...t.searchParams.get("agentId")?{agentId:t.searchParams.get("agentId")}:{},...t.searchParams.get("sessionId")?{sessionId:t.searchParams.get("sessionId")}:{},...readRunState(t.searchParams.get("state"))?{state:readRunState(t.searchParams.get("state"))}:{}}:void 0}(t.url);if("GET"===t.method&&r)return sendJson(n,200,e.listRequests(r)),!0;const o=function readRequestCancelId(e){const t=(e??"").match(/^\/requests\/([^/]+)\/cancel$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("POST"===t.method&&o){const r=await readJson(t);return e.cancel(o,"string"==typeof r.reason?r.reason:void 0),sendJson(n,200,e.inspectRequest(o)??{error:"request_not_found"}),!0}if("POST"===t.method&&"/requests"===t.url){const r=await readJson(t);return sendJson(n,200,await e.request(function readRuntimeRequest(e){const t=function readToolCall(e){if("object"!=typeof e||null===e)return;const t=e;return"string"==typeof t.toolId?{toolId:t.toolId,args:t.args}:void 0}(e.toolCall),n=function readWorkflow(e){const t=readRecord(e);if(t)return{..."string"==typeof t.workflowId?{workflowId:t.workflowId}:{},..."string"==typeof t.routeId?{routeId:t.routeId}:{},...void 0!==t.input?{input:t.input}:{},..."object"==typeof t.metadata&&t.metadata?{metadata:t.metadata}:{}}}(e.workflow),r=function readMemory(e){const t=readRecord(e);if(t)return{..."string"==typeof t.namespace?{namespace:t.namespace}:{},...!1===t.recall||readRecord(t.recall)?{recall:t.recall}:{},...Array.isArray(t.candidates)?{candidates:t.candidates}:{}}}(e.memory),o=readRecord(e.metadata);return{input:"string"==typeof e.input?e.input:"",..."string"==typeof e.agentId?{agentId:e.agentId}:{},..."string"==typeof e.sessionId?{sessionId:e.sessionId}:{},..."string"==typeof e.requestId?{requestId:e.requestId}:{},..."string"==typeof e.parentRunId?{parentRunId:e.parentRunId}:{},...t?{toolCall:t}:{},...n?{workflow:n}:{},...r?{memory:r}:{},...o?{metadata:o}:{}}}(r))),!0}return!1}(e,u,i)||function handleWorkflowRoutes(e,n,r){if("GET"===n.method&&"/workflows"===n.url)return sendJson(r,200,e.inspect().workflows),!0;const o=function readWorkflowMermaidId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/mermaid$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("GET"===n.method&&o){const t=e.getWorkflow(o);return sendJson(r,t?200:404,t?{mermaid:s(t)}:{error:"workflow_not_found"}),!0}const a=function readWorkflowPlanId(e){const t=(e??"").match(/^\/workflows\/([^/]+)\/plan$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(n.url);if("GET"===n.method&&a){const n=e.getWorkflow(a);return sendJson(r,n?200:404,n?t(n):{error:"workflow_not_found"}),!0}return!1}(e,u,i)||function handleRunInspectionRoutes(e,t,o){const s=function readRequestInspectionId(e){const t=(e??"").match(/^\/requests\/([^/]+)$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&s){const t=e.inspectRequest(s);return sendJson(o,t?200:404,t??{error:"request_not_found"}),!0}const a=function readTraceRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/trace$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&a){const t=e.getRun(a);return sendJson(o,t?200:404,t?n(t):{error:"run_not_found"}),!0}const d=function readSpanRequestId(e){const t=(e??"").match(/^\/runs\/([^/]+)\/spans$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&d){const t=e.getRun(d);return sendJson(o,t?200:404,t?r(t):{error:"run_not_found"}),!0}const u=function readReplayRequestId(e){const t=(e??"").match(/^\/requests\/([^/]+)\/replay$/u);return t?.[1]?decodeURIComponent(t[1]):void 0}(t.url);if("GET"===t.method&&u){const t=e.exportReplayBundle(u);return sendJson(o,t?200:404,t??{error:"run_not_found"}),!0}return!1}(e,u,i)||sendJson(i,404,{error:"not_found"})}(e,u,i)}catch(e){sendJson(i,500,{error:e instanceof Error?e.message:String(e)})}}(u,e,i)})}function readRunState(e){return"queued"===e||"running"===e||"completed"===e||"failed"===e||"cancelled"===e?e:void 0}function readRecord(e){return"object"!=typeof e||null===e||Array.isArray(e)?void 0:e}function sendJson(e,t,n){e.writeHead(t,{"content-type":"application/json"}),e.end(JSON.stringify(n))}async function readJson(e){const t=[];for await(const n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return 0===t.length?{}:JSON.parse(Buffer.concat(t).toString("utf8"))}

package/packages/protocols/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/protocols",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -10,6 +10,6 @@
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
   "peerDependencies": {
-    "@stable-harness/core": "0.0.87"
+    "@stable-harness/core": "0.0.88"
   }
 }

package/packages/tool-gateway/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/tool-gateway",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",

package/packages/workspace-yaml/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable-harness/workspace-yaml",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "type": "module",
   "files": [
     "dist/**/*.js",
@@ -11,6 +11,6 @@
     ".": "./dist/index.js"
   },
   "peerDependencies": {
-    "@stable-harness/core": "0.0.87"
+    "@stable-harness/core": "0.0.88"
   }
 }